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A CRITERION TO RULE OUT TORSION GROUPS FOR 
ELLIPTIC CURVES OVER NUMBER FIELDS 

PETER BRUIN AND FILIP NAJMAN 


Abstract. We present a criterion for proving that certain groups of the form 
IjraL © Z/nZ do not occur as the torsion subgroup of any elliptic curve over 
suitable (families of) number fields. We apply this criterion to eliminate certain 
groups as torsion groups of elliptic curves over cubic and quartic fields. We 
also use this criterion to give the list of all torsion groups of elliptic curves 
occurring over a specific cubic field and over a specific quartic field. 


1. Introduction 

A fundamental result in the theory of elliptic curves, the MordelUWeil theorem, 
states that the Abelian group of points of an elliptic curve (or more generally an 
Abelian variety) E over a number held K is hnitely generated. Thus, E{K) is 
isomorphic to E(A)tors © 2’", where E(A)tors is the torsion subgroup of E{K) and 
r > 0 is the rank of E{K). 

We will denote by $(d), where d is a positive integer, the set of all the possible 
isomorphism types of E(K)tois, where K runs through all number helds K of de¬ 
gree d and E runs through all elliptic curves over K. Similarly, for a hxed number 
held K, we will denote by $(A) the set of all the possible isomorphism types of 
E{K)tors where E runs through all elliptic curves over this hxed held K. Obviously, 
if A is a number held of degree d, then $(A) C $(d), and $(d) is the union of 
the <I>(A) with K running over all number helds of degree d. It is interesting to 
determine the set $(d) for hxed integers d, as well as the set $(A) C <I>(d) for hxed 
number helds K of degree d. 

Let Cm be a cyclic group of order m. Mazur’s torsion theorem [231 El] tells us 
that <I>(Q) = ‘I*(l) consists of the following 15 groups: 

Cm, m = 1,..., 10,12, 

^ C2®C2m, m=l,...,4. 

Similarly, by a theorem of Kamienny m Theorem 3.1] and Kenku and Momose 
[M Theorem (0.1)], $(2) consists of the following 26 groups: 

Cm, m = 1,..., 16,18, 

C 2 ®C 2 m, m = 1 ,..., 6 , 

C3(BC3m, m = l,2, 

C4 © C'4. 

Over cubic helds, we know that if a point on an elliptic curve has prime order p, 
then p < 13 [3T1|32], we know all the isomorphism types in $(3) that appear as the 
torsion groups of inhnitely many non-isomorphic elliptic curves m, and we know 
that this list is strictly smaller than $(3) [29], as opposed to what happens in the 
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rational and quadratic cases. Unfortunately, $((i) has as yet not been determined 
for any d > 3, although Maarten Derickx (personal communication) has told us 
that the computation of $(3) should be within reach. 

As for results on ^{K) for specific K, Mazur [23] determined $(Q) = ‘h(l), the 
second author determined $(Q(C 3 )) and $(Q(C 4 )) [26], and methods of determining 
if* (AT) for other quadratic fields K were given by Kamienny and the second author 
m- The second author also tried to determine ^{K) for certain cubic fields K 
with small discriminant, but managed to obtain only partial results [28] . 

In this paper we develop a criterion, based on a careful study of the cusps of 
modular curves Xi{m,n), which can tell us that certain groups do not occur as 
torsion groups of elliptic curves over a number field K. This criterion is essentially 
a generalization of a criterion of Kamienny [13] . Kamienny showed that for certain 
n, the curve Xi{n) cannot have non-cuspidal points over an extension of degree d 
of Q, where d is less than the gonality oiXi (n), as points of degree d on Xi (n) would 
force functions of a smaller degree than the gonality to exist, which is impossible. 

We generalize Kamienny’s approach both by using the modular curves Ali(m, n) 
instead of Xi{n) and by viewing the number fields K as extensions of a suitable 
subfield L of Q((m)- This generalization is somewhat technical (for example, it 
requires a careful consideration of the fields of definitions of cusps), but gives us 
more flexibility in ruling out torsion groups of the form Cm © C„. Our criterion, 
on its own or in combination with other techniques, allows us to advance our un¬ 
derstanding of the torsion groups of elliptic curves over K, both when AT is a fixed 
number field and when AT runs through all number fields of degree d. In partic¬ 
ular, we make progress in determining $(3) and $(4) by ruling out a number of 
possibilities for torsion groups of elliptic curves over cubic and quartic fields. As 
for determining $(Ar) for a fixed cubic or quartic field AT, a natural choice for a 
quartic field AT, in view of [26], is the ‘next’ cyclotomic field, Q(C 5 )- Since there are 
no cubic cyclotomic fields, we choose the cyclic cubic field Q(Ci 3 + C 13 + C 13 + CiD- 

In Section [2l we state and prove our main results (Theorem [T] and Corollary [S]) . 
In Sections [3] and m we use Theorem[T]to determine $(Q(Ci 3 + C 13 + C 13 + C 13 )) and 
<I>(Q(C 5 )), achieving to our knowledge the first determination of $(Ar) for a cubic 
and a quartic field, respectively. In Sections [5] and [U we use Corollary [S] together 
with other techniques, to prove that a large number of finite groups do not occur 
as torsion groups of elliptic curves over cubic and quartic fields, respectively. 

The computer calculations were done using Magma [22]. Showing that the rank 
of Jacobians over Q is 0, unless otherwise mentioned, has been done by showing 
that the A-function of (the factors of) J is non-zero. By results of Kato [17], the 
Birch-Swinnerton-Dyer conjecture is true for quotients of modular Jacobians, so 
this computation unconditionally proves that the rank is 0. 

2. Main results 

Notation. If AT is a number field. Ok denotes its ring of integers. If p is a prime ideal 
of Ok, we write fc(p) for the residue field Ok/P, and Nm(p) = #fc(p). Furthermore, 
we denote by Ok,p the localization of Ok at p. 

Definition. Let m and n be positive integers with m \ n. Let A be a subfield 
of Q(Cm), and let po be a prime of A. Let X be the curve Xi(m, n)Q(^^) viewed 
as a (proper, smooth, but possibly geometrically disconnected) curve over A. We 
consider triples (A, A',?!), where 
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• A" is a flat, proper model of X over Ol, po such that the j-invariant extends 
to a map j: X 

• A”' is a flat, proper and regular curve over Ol, po such that the curve X' = 
X[ over L is geometrically connected; 

• TT: A” —>■ A”' is a proper and generically finite map of Oi^pp-schemes. 

Given such a triple (A’,A’',7r), we write C for the topological inverse image of 
the section oo under the map j: X ^ , and C for the topological image 

of C under tt equipped with the reduced induced subscheme structure. With this 
notation, we call {X^X'^-k) a nice {L,po)-quotient of Xi(m,n) if the following 
conditions are satisfied: 

(1) The scheme C' is normal and lies in the smooth locus of X' over Ol,po- 

(2) The image of the open subscheme X\C under tt equals X' \C'. 


Theorem 1. Let A be a group of the form Cm © Cn with m \ n, let K and L be 
number fields with L C Q(Cm) C K, and let d = [K : L], Let po be a prime of L, let 
p be the residue characteristic of po, and let e be the largest absolute ramification 
index of a prime of K dividing po- Let Sk, po be the set 

Sk.po = {<5 > 1 I ^ divides [fc(p) : /c(po)] for some prime p of K over po}. 


Let 


A' = 


A 

maximal p-divisible subgroup of A 


ifp> e-\-l 
if p < e + 1. 


Let {X,X',Tr) be a nice {L,po)-quotient of Xi(m,n). Let X' = Xf, and let J' be 
the Jacobian of X'. Let h be the least common multiple of the ramification indices 
e(q/po) where L{C) is the function field of an irreducible component C of C and 
q is a prime of L{C) overpQ. Assume that the following conditions are satisfied: 

i) The gonality of X' over L is at least dh-\- 1. 

ii) The group J'{L) has rank 0. 

iii) Ifp = 2, then the 2-torsion subgroup of J'{L) is trivial. 

iv) For all primes p | po of K, there does not exist an elliptic curve over k(p) 
with a subgroup isomorphic to A'. 

v) For all primes p \ po of K, neif/ier 3Nm(p) uor 4Nm(p) is divisible byffA'. 

vi) For all irreducible components C of C, if the function field L(C) has a 
prime q over po such that [A:(q) : fc(po)] is in Sk,po> then q is the unique 
prime of L{C) overpQ. 

Then there does not exist an elliptic curve over K with a subgroup isomorphic to A. 


We will prove Theorem [T] below; we begin with an auxiliary result. 


Lemma 2. Let A, K, L and po be as in Theorem Under the conditions iv) 
and v) of Theorem [7J any elliptic curve E over K equipped with an embedding 
i: A ^ E{K) has multiplicative reduction at all primes of K lying over po. 

Proof. Let p be a prime of K over pQ. By Ep we denote the reduction of E modulo p, 
i.e. the special fibre of the Neron model of i? at p. Then we have a reduction map 

E{K) ^ Ep{k{p)). 

This map is injective on l{A') by [HI Appendix] and the definition of A'. The 
group Ep(k{p)) therefore contains a subgroup isomorphic to X. 
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By assumption iv), E does not have good reduction at p. HE had additive re¬ 
duction, then by the Kodaira-Neron classification [381 Appendix C, §15], Ep{k{p)) 
would be a product of the additive group of k{p) and a group of order < 4, contra¬ 
dicting assumption v). We conclude that E has multiplicative reduction at p. □ 

Proof of T/ieorem [TJ Let and Xp^ be the special fibres of X and X' over po- Let 
J' be the Neron model of J' over Ol.po- ^ is known [S] §9.5, Theorem 4] that J' 
represents the functor P/E, where P is the open subfunctor of Pv^x' jOh po given 
by line bundles of total degree 0 and E is the schematic closure in P of the unit 
section in P{L). We have a commutative diagram 

p(Ol,po)—- mpo)) 


j'{L) = r (Ol.po) —- r (fc(Po)). 

By assumptions ii) and iii) and [181 Appendix], the bottom horizontal map is in¬ 
jective. 

Suppose the theorem is false. Let E be an elliptic curve over K equipped with 
an embedding A >-^ E{K). These data determine a point of X{K) whose Zariski 
closure is a prime divisor D on X. Let Dp^ be the schematic intersection of the 
divisor D with Xp^, and let (tt^D)p^ be the schematic intersection of tt^D with Xp^. 
By Lemma [21 E has multiplicative reduction at all primes of K over po, so the 
support of Dp^ is contained in C. Let Z be the support of (7r*T))p(,; then the 
definition of C' implies that Z is contained in C'. We can write (7r*Zl)pj, as a linear 
combination where the riz are positive integers. 

Let 2 be a point of Z. Since {X,X’,-k) is a nice (L, po)-quotient, there is a 
unique irreducible component Cz of C containing z, and the coordinate ring of Cz 
is the integral closure of C>l,po in the function field L{Cz) of Cz- Hence k{z) can 
be identified with the residue field fc(qz) of some prime of L{Cz) over po; in 
particular, [^(qz) : A:(po)] equals [k{z) : A:(po)]. On the other hand, k{z) can also be 
identified with a subfield of the residue field k{pz) of some prime pz, of K over po, so 
[k{z) : fc(po)] divides [^(pz) : ^(po)]- This implies that [A:(qj;) : A:(po)] = [k{z) : A:(po)] 
is in Sk.po- By assumption vi), q^ is the only prime of L{Cz) over po. This implies 
that the schematic intersection of Cz with Xp^ equals CzZ, where Cz = e(qz;/po)- 
We note that Cz divides h. 

We consider the effective divisor D' on X' defined by 



By the above description of the intersections of D and the Cz with X ^^, the divisor 
hir^D — D' on X' specializes to the zero divisor on X'p^. This implies that the class 
of /i7r*Z? — D' in P(fc(po)) is zero. By the commutativity of the above diagram and 
the injectivity of the bottom map, the class of — D' in J'{L) is also zero. By 
assumption i), we conclude that the divisors hir^D and D' are equal. The generic 
fibre of D is supported outside C; since {X,X\tt) is a nice (L,po)-quotient, the 
generic fibre of is supported outside C. On the other hand, the generic fibre 
of D' is supported on C', a contradiction. □ 

The following corollary of Theorem |T] is useful for eliminating groups from $(d). 
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Corollary 3. Let A be a group of the form Cm © Cn with m \ n, let d > 1 be 
an integer, and let L be a subfield of Q(Cm) ■ Let po be a prime of L, let p be the 
residue characteristic of pQ, and let q = Nm(po). Let 


Spo = 


6 > 1 


K is an extension of Q(Cm) with [K : L] = d, 
p is a prime of K over po, and S divides [k{p) : fc(po)] 


Let 


A' = 


A 

maximal p-divisihle subgroup of A 


if p > d+1 
if P < d + 1- 


Let {X,X',tt) he a nice {L,po)-quotient of Xi{m,n). Let X' = Xf, and let J' be 
the Jacobian of X'. Let h be the least common multiple of the ramification indices 
e(q/po) where L{C) is the function field of an irreducible component C of C and 
q is a prime of L{C) over po- Assume that the following conditions are satisfied: 

i) The gonality of X' over L is at least dh + 1. 

ii) The group J'{L) has rank 0. 

iii) Ifp = 2, then the 2-torsion subgroup of J'{L) is trivial. 

iv) For all i € Sp^, there does not exist an elliptic curve over a field of q* 
elements with a subgroup isomorphic to A'. 

v) Neither iq'^ nor Aq‘^ is divisible by ffA'. 

vi) For all irreducible components C of C, if the function field L{C) has a 
prime q over po such that [fc(q) : fc(po)] is in Sp^, then q is the unique 
prime of L{C) over po- 


Then there does not exist an elliptic curve over an extension of degree d of L with 
a subgroup isomorphic to A. 


Proof. Under the conditions of the corollary, the conditions of Theorem [T] are sat¬ 
isfied for every extension K of degree d over L such that L C Q((m) Q K. □ 


We end this section with some remarks on checking the conditions of Theorem [T] 
and Corollary |3l The conditions are straightforward to check in practice, apart 
from condition ii) if L Q. An easy way to make sure that condition vi) holds is 
to choose Po totally inert in Q(Cn)- 

An important special case occurs when L equals Q(Cm), the prime po does not 
divide n, the curve A' equals X and tt is the identity on A. In this case the 
conditions simplify as follows: (A, A',7r) automatically extends to a nice (L,po)- 
quotient, and we have A' = A and h = \. Moreover, the following remarks are 
useful to check condition vi) in these cases. 

Let r be a divisor of n. The cusps of Ai (m,n) represented by points {a : b) € 
P^(Q), where a, b are coprime integers with gcd(&, n) = r, all have the same field of 
definition, which we denote by Fm,n,r- By generalities on cusps and by the existence 
of the Weil pairing, we have Q(Cm) © Fm,n,r © Q(Cn)- Explicitly, the field Fm,n,r 
can be described as follows. We consider the subgroups C L{m,n,r © Gm,n © 

defined by 

Gm,n = {s G {fLjn'iY' I s = 1 (mod m)}, 

Fm,n,r = {« G ifLjn'LY' I s = 1 (mod lcm(TO, n/r))}, 

TT _ if gcd(TOr, u) > 2, 

• {±1} if gcd(TOr, u) < 2. 
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(Note that in the latter case m is 1 or 2, so —1 is in Gm,n-) Using the canonical 
identification of Gal(Q(Cn)/Q) with (Z/nZ)^, the field Fm,n,r is then the field of 
invariants of Hm,n,r acting on Q(Cn)- In the case m = 1, we have 

p _fQ(Cn/r) ifr> 2 , 

\Q(Cn/r-)+ ifr< 2 . 

Condition vi) can be checked by computing a defining polynomial for Fm,n,r over L 
and factoring it modulo po- 

3. Torsion groups of elliptic curves over Q(Ci 3 + C13 + C13 + Cil) 

In this section, we consider the cyclic cubic field 

K = Q(Ci3 + Cl 3 + Cl 3 + C 13 ) 

of discriminant 13^. This field can be written as K = Q(uj) where w has minimal 
polynomial — 4x + 1. 

Theorem 4. For every elliptic curve E over K, the torsion group E{K)tors is one 
of the groups from Mazur’s torsion theorem. 

Proof. By results of Parent iniisa, we know that no prime p > 13 divides the 
torsion order of an elliptic curve over a cubic field. It therefore remains to prove 
that E{K) does not contain any of the following groups: 

Cn where n = 11,13,14,15,16,18, 20, 21, 24, 25, 27, 35,49, 

C 2 © C 2 m where m = 5,6. 

For later use, we note that 3 is totally inert, 5 is totally split and 13 is totally 
ramified in K. Let p 5 be one of the primes above 5, and let P 13 be the unique prime 
above 13. 

3.1. The cases Cn, C 14 and C 15 . In these cases, the modular curve Xi{n) is 
an elliptic curve, and an easy computation in Magma shows that Xi{n){K) = 
Xi(n)(Q). It is well known that Xi(n)(Q) contains only cusps (see for example 
[23]), hence Yi{n){K) = 0. 

3.2. The cases C 20 , C 24 , C 2 ®Cio and C 2 ®Ci 2 . Recall that Xo(20) and Xq{24) 
are elliptic curves. A computation in Magma shows that Xq{26){K) = Ao(20)(Q) 
and Ao(24)(Ar) = Xo(24)(Q), and it is known that Ao(20)(Q) and Ao(24)(Q) con¬ 
sist purely of cusps (see for example |24]1. As an elliptic curve with a point of order n 
admits a cyclic isogeny of degree n, it follows that Fi(20)(Ar) = Yi(24)(Ar) = 0. 
Similarly, an elliptic curve with torsion C 2 © C 2 m over K is 2-isogenous to a curve 
with a cyclic 2m-isogeny, and hence it follows that yi(2,10)(AT) = Yi(2, 12){K) = 0. 

3.3. The cases Ciq and Cig- The modular curves Xi{n) are all hyperelliptic 
curves of genus 2. Magma computations show that rk Ji(13)(fc) = rk Ji(16)(Ar) = 
rk Ji(18)(A:) = 0. 

We compute Ji(13)(F5) ~ Cig, and as Ji(13)(Ar) ^ Ji(fc(p 5 )) = Ji(F 5 ) and 
Ji(Q) ~ Cig, it follows that Ji(13)(Ar) = Ji(13)(Q) ~ Cig. It follows that 
yi(13)(Ar) = 0. A similar argument deals with the case n = 18. 

For n = 16, it is not enough to use just one prime. We compute #Ji(16)(F5) = 
40, #Ji( 16)(F27) = 1220 and Ji(16)(Q) ~ Cg © Ciq. Since gcd(40,1220) = 20, it 
follows that Ji(16)(Ar) = Ji(16)(Q). We conclude that yi(16)(Ar) = 0. 
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3.4. The cases Cn for n = 21, 25, 27, 35, 49. We apply Theorem [T] using L = Q, 
po = (5) for n = 21,27,49 and po = (13) for n = 25,35, X' = X and tt = id. 
Conditions i), ii) and hi) are satisfied since in all cases Xi{n) is of gonality > 4 
m and rk Ji(n)(Q) = 0. Condition iv) holds because of the Hasse bound over 
Fs and F 13 . Condition v) clearly holds. For n G {27,35,49}, condition vi) holds 
because po is totally inert in Q(Cri)- For n = 21, condition vi) holds because 
Sk,{ 5 ) = {1} and there are no primes of degree 1 above 5 in Q(C 3 ), QCCt) 
Q(C 2 i)’'’- Finally, for n = 35, condition vi) holds because Sk,{i 3 ) = {1} and there 
are no primes of degree 1 above 13 in Q(C 5 ), QiCr) and Q(C 35 )^- 

Theorem 0] follows by combining the above cases. □ 

4. Torsion groups of elliptic curves over Q(C5) 

In this section, we will determine 4>(itr), where K is the field Q(C 5 )- We will 
use the (as of yet unpublished) result that the largest prime dividing the order of 
a point over a quartic field is 17 [6], and the fact that there is no 17-torsion over 
cyclic quartic extensions of Q [5]. 

Theorem 5. Let K = CKCs)- Then for every elliptic curve E over K, the torsion 
group E{K)toTs is one of the following groups: 

Cn where n = 1,..., 10,12,15,16, 

(3) C 2 © C 2 m where m = 1,..., 4, 

Cs © C^. 

There exist infinitely many elliptic curves with each of the torsion groups from the 
list ©, except for Ci^ and Ciq. 

Proof. As mentioned at the beginning of this section, we need only consider primes 
p < 13 as possible divisors of the order of a torsion point. 

Before proceeding further, we find all elliptic curves over K containing a point 
of order 15 and show that the torsion subgroup of these curves is exactly C 15 . 
Recall that Xi(15) is isomorphic to the elliptic curve with Cremona label 15a8. We 
compute that the group of AT-points of this elliptic curve is isomorphic to Ciq. Of 
the 16 points, 8 are cusps, and we compute that the remaining 8 points correspond 
to elliptic curves over K with torsion subgroup C 15 . In particular, there exist no 
curves with torsion Cisn for any integer n > 1 and no curves with torsion C 5 © C 15 . 

There exist elliptic curves with points of order 16 over AT; one such example is 
the elliptic curve 

2/'+ (6Cl + C5 + 3C5 + 6 )t 2/+ (-lOCi - 2 C| - 5C5 - 8)2/= + (-lOCi - 2C5" - bCs - 8 )t 2 , 

on which (0, 0) is a point of order 16. Since Ai(16) has genus 2, the set Xi(16)(Ar) 
is finite by Faltings’s theorem. 

It remains to prove that E(K) does not have a subgroup isomorphic to one of 
the following groups: 

Cn where n = 11,13,14,17,18, 20, 21, 24, 25, 27,32,35,49, 

C 2 © C 2 m where m = 5, 6,8, 

Cs © CiQ. 
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4.1. The cases Cn for n = 11, 14, 20, 49 and C 2 © C 2 m for m = 5, 6 . These 
cases are dealt with by simply computing Xi{n){K) = Xi{n){Q), for n = 11, 14, 
Xoi20)iK) = Xo(20)(Q) for C 20 and C 2 © Cio, Xo(24)(X) = Xo(24)(Q) for ^24 
and C 2 © ^12 as in the proof of Theorem |4l Similarly, noting that Xq (49) is an 
elliptic curve, we compute X(j{4Q){K) = Xo(49)(Q), which consists only of cusps. 

4.2. The case C 2 i- The curve Xo{21) is an elliptic curve and we compute that 
Xq{21){K) = Xo(21)(Q). However, the difference between this case and the previ¬ 
ous ones is that Yq[2\){K) is not empty and hence one needs also to check that the 
elliptic curves with 21-isogenies do not have any iti-rational points over K. This 
can be done by using division polynomials; see [28l |29] for details. 

4.3. The cases C 13 and Cig. These cases are dealt with exactly as in the proof 
of Theorem 01 

4.4. The cases C 27 , C 32 and C 2 © Ciq. We apply Theorem [T] with L = Q, pg = 
(11) (which is totally split in if), X' = X and tt = id. The curves Xi{27), Xi(32) 
and ^ 1 ( 2 ,16) all have gonality > 5 by [TH Theorem 2.6] (see also [7]), and their 
Jacobians all have rank 0. This implies conditions i), ii) and iii). Condition iv) 
follows from the Hasse bound over Fn, and condition v) clearly holds. Finally, 
condition vi) holds in the case C 27 because 11 is totally inert in Q(C 27 ), and in the 
cases C 32 and C 2 © C\q because Sk,ii = {1} and there are no primes of degree 1 
above 11 in the fields Q(C 4 ), Q(C 8 ), Q(Ci 6 )’'' and Q(C 32 )’''- 

4.5. The case ( 725 . We apply Theorem [T] with L = Q, pg = (2) (which is totally 
inert in K), X' — X and tt = id. The modular curve Xi{25) has gonality at 
least 5 m Theorem 2.6], and Ji(25)(Q) has rank 0 [21] and trivial 2-torsion; this 
implies conditions i), ii) and iii). Although 25 is in the Hasse interval of Fig, a 
search among all elliptic curves over Fig shows that all such curves E with 25 
points satisfy if (Fig) ~ (Cg © (lig. This shows that condition iv) holds. Condition v) 
clearly holds. Finally, condition vi) is satisfied because 2 is totally inert in Q(C 25 )- 

4.6. The case C 35 . We apply Theorem [T] with L = Q, pg = (3) (which is totally 
inert in K), X' = X and tt = id. The curve Ai(35) has gonality at least 5 [121 
Theorem 2.6], and Ji(35)(Q) has rank 0; this shows that conditions i) and ii) hold. 
One easily checks conditions iii) and v). By [351 Theorem 4.1], there are no elliptic 
curves with order a multiple of 35 over k{p) = Fgi; this implies condition iv). The 
prime 3 is totally inert in Q(C 5 ), Q(C 7 ) and Q(C 35 )''", which implies condition vi). 

4.7. The case C 5 © (7ig. We apply Theorem [T] with L = Q(C 5 ), po one of the 
primes above 11 (which is totally split in L), X' = Xg(50)L and tt the map defined 
by the inclusion a“^Fi(5,10)a C rg(50), where a = (g i)- The gonality of X' is 
2, and we compute in Magma that Jg(50)(if) has rank 0; this implies conditions 
i) and ii). One easily checks conditions iii) and v). Condition iv) follows from the 
Hasse bound over A:(pg) = Fn. Finally, condition vi) follows from the fact that all 
cusps of X' are dehned over L. 


Theorem [Sj follows by combining the above cases. 


□ 
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5. Results for all cubic fields 

We now apply the results of Section [2] to prove that certain groups are not 
in $(3). We note that the cases (740, and (and more) were also proved 
independently by Wang [34] . 

Theorem 6. The groups C 2 © C 2 Q, (74o, <749 and C 55 do not occur as subgroups of 
elliptic curves over cubic fields. 

Proof. To prove the cases ( 72 ©( 72 o, (749 and ( 755 , we apply Corollary|3|with L = Q, 
po = (3), X' = X and tt = id. We have = {1,2,3}. Conditions i) and ii) hold 
because 7fi(2,20), 7fi(49) and 7fi(55) have gonality at least 4 and their Jacobians 
have rank 0 over Q. Condition iv) holds because 40, 49 and 55 are all outside the 
Hasse intervals of F 3 , Fg and F 27 . Condition iii) and v) clearly hold. Condition vi) 
follows from the fact that there are no primes of degree 1, 2 or 3 above 3 in the 
fields Q(Cn) for n S (5, 7,11} and Q{Cn)~^ for n S (20,49, 55}. Finally, the case C 40 
follows from the case C 2 © C 20 in view of the covering 7fi(40) —>■ Xi{2, 20). □ 

6 . Results for quartic fields 

In this section, we show that certain groups of the form (7m©(7„, with m \ n and 
TO > 3, are not in $(4). Recall that an elliptic curve E with a subgroup isomorphic 
to Cm © Cn has to be defined over a held containing Q(Cm)- 

Theorem 7. The following groups do not occur as subgroups of elliptic curves over 
quartic fields: 

(73 © (7i2, (73©(7i 8, (73 ©(727, (73 © (733, (73 © (739, (74 ©(7i2, 

(74 © (7i6, (74 ©(728, (74 ©(744, (74 © (752, (74 © (708, (78 © (78 . 

Proof. We consider each of the above cases separately. 

6.1. The case C 3 © Ci 2 - The curve X = 7fi(3,12) has genus 3 and is non- 
hyperelliptic | 8 ]. We apply Corollary |3| with L = Q(C 3 ), Po one of the primes 
of norm 7 in L, X' = X and tt = id. We compute that the Jacobian of X has 
rank 0 over Q(C 3 ) (see |9l proof of Lemma 4.4] for details). This shows that condi¬ 
tions i), ii) and iii) are satisHed. For all elliptic curves over helds of 49 elements with 
36 points, the group of points is isomorphic to Cq® C'e, proving iv). Condition v) 
clearly holds. Finally, condition vi) holds because po is inert in Q(Ci 2 )- 

6.2. The case C 3 © Cig. The curve X = 7fi(3,18) has genus 10, and its gonality 
over C is at least 4 by the results of [T] and [501 Appendix 2] (see also [HI Theo¬ 
rem 1.2]). We use Corollary^ choosing L = Q(C 3 ), Po = (2), X' = X and tt = id. 
The Jacobian J = Ji(3,18) over Q(C 3 ) decomposes up to isogeny as 

7 

J ^ Bi, 

i=l 

where Bi is an elliptic curve for 1 < z < 4 and Bi is an Abelian surface for 5 < z < 7. 
A number of 2-descent and L-series computations in Magma shows that the rank of 
all these is 0. This shows that condition ii) is satisfied. If q is one of the primes 
of norm 7 in L, then J(fc(q)) has order 3^'* • 7^. This implies that the 2-torsion 
of J{L) is trivial, so condition iii) holds. The Hasse bound implies condition iv). 
Condition v) clearly holds, and condition vi) holds because 2 is totally inert in 
Q(Ci8) = Q(C9). 
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6.3. The case Cz®C 27 - We use Corollary[3l taking L = Q, po = (2), X' = Xi(27) 
and tt: X ^ X' the canonical map. Condition i) holds because X' has gonality 6 
by H. A computation using L-functions shows that rk J'(Q) = 0, which implies 
condition ii). Condition iii) follows from =f^J'(¥r) = 242518973481. Condition iv) 
and v) clearly hold. Condition vi) holds since 2 is inert in Q(C 27 )- 

6.4. The cases C 3 © C 33 and C 3 © Csg. These cases require a slightly different 
approach, following the lines of [14]. Let AT be a quadratic extension of Q(C 3 ), let 
cr be the non-trivial element of Gal(Ar/Q(C 3 )), and let p be a prime of K above 7. 

We first decribe the case C 3 ©< 733 . We take the hyperelliptic curve X' = Ao(33) 
of genus 3, with hyperelliptic involution icn. Suppose that y is a non-cuspidal point 
onAi(3,33). By Lemma [S] y maps to the cusp at 00 mod p, and maps to 00 
mod p. The points y and y'^ on Ai(3,33) map to x and x'^ on X', which likewise 
map to 00 mod p. Consider the map 

/: X'^J' 

t i-A + — 2 oo]. 

Then f{x) is Q(C 3 )-rational, and f{x) mod p is 0. We compute that J'(Q(C 3 )) is 
finite. Since reduction modulo p is injective on the torsion, it follows that f{x) = 0 
over Q(C 3 ), so there is a function g whose divisor is x + x’^ — 2oo. Since g has 
degree 2, it is fixed by the hyperelliptic involution. It follows that 00 is fixed by 
the hyperelliptic involution. But wu acts freely on the cusps of A', leading to a 
contradiction. 

We now deal with the case C3 © ( 739 . We take 

A' = Ao( 39 )/r(;i 3 : = x® - 20x^ - 6 x® + Mx^ - 48x + 9. 

The curve A' is hyperelliptic of genus 2, and the hyperelliptic involution on A' is 
induced by 1x3. We compute that 7'(< 0 (^ 3 )) is finite. Using the same arguments as 
above, we conclude that W3 fixes the cusp at 00 of A', but W3 acts by switching 
the two cusps 0 and 00 , which leads to a contradiction. 

6.5. The case Ca © ( 7 i 2 . We apply Corollary [3] with L = Q(z), po = (2 + z), 
A' = A = Ai(4,12) and tt = id. The curve A has genus 5 and is non-hyperelliptic 
[ 8 ]. It is the base change of the curve Aa'( 48 ) over Q, where A' is the subgroup 
{±1, ±13, ±25, ±37} of (Z/48Z)^. By [51 pages 464-465], the Jacobian Ja' of Aa' 
decomposes over Q as 

Ja' ^ bI®B2® B3, 

where 

i?!: = X® — x^ — 4x ± 4, 

7^2 : y^ = X® ± x^ — 4x — 4 
and B3 is the Jacobian of the curve 

C 3 : y^ = X® — lOx® ± 9x. 

Note that B2 is a —1-twist of Bi, and hence Bi and B2 are isomorphic over Q(z). 
A computation in Magma shows that 

rkBi(Q(z)) = rkB 2 (Q(z)) = rkB 3 (Q(z)) = 0 , 

so condition ii) is satisfied. Condition iii) holds trivially. The Basse bound implies 
condition iv). Condition v) is clearly satisfied. Finally, condition vi) holds because 
po is totally inert in Q(Ci 2 ). 
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6.6. The case C 4 0 Cie- We take the genus 5 curve X' = Xi(2, 16) of gonality 4 

[T 2 I Theorem 2.8.], L = Q(i) and po = (2 + The Jacobian J' of X' factors 

over Q as 

Jl(16)^ 

where Ei is the elliptic curve over Q with Cremona label 32al. A computation 
using 2-descent shows that rk J'(Q(i)) = 0 and po is inert in Q(Ci6)- As all the 
assumptions of Corollary [3] are satisfied, the result follows. 

6.7. The case C 4 © C' 28 - We take X' = Ai(28) of gonality 6 [7], L = Q and 
po = (3). We compute rk J'(Q) = 0, showing that condition ii) holds. Condition 
vi) is satisfied because Sk,po = {li2,4}, while 3 is inert in Q{i) and none of the 
fields Q(C 7 ), Q(Ci 4)''’ and Q(C 28 )''’ have any primes of degree 1, 2 or 4 above 3. 

6.8. The case C 4 © C 44 . We take X' = Ai(44) of gonality > 7 [T], L = Q and 
po = (3). Condition vi) is satisfied because Sk,^^ = {1,2,4}, while 3 is inert in 
Q(i) and none of the fields Q(Cii)i Q(C22)^ and Q(C 44 )^ have any primes of degree 
1, 2 or 4 above 3. After computing rk J'(Q) = 0, we are done. 

6.9. The case C 4 © C^ 2 - We take X' = Xi(26) of gonality 6 [7], T = Q and po = 
(3). We check that 3 splits into 4 primes of degree 3 in Q(Ci 3 ), all of which remain 
inert in Q(C 52 )- As (3) is inert in Q(i), the primes of any quartic field containing 
Q(i) above it are of degree 2 or 4, this proves vi). We compute rk J'(Q) = 0 and 
#J'(F 5 ) = 3^5^7^19^, proving that all the assumptions are satisfied. 

6.10. The case C 4 © Cos- We use Corollary[3l taking X' = Ai(34) of gonality 10 
[7], L = Q and po = (3). Since 3 splits into 2 primes of degree 16 over Q(C68) 
and is inert in Q(Ci 7 ) and Q(i), it easily follows that condition vi) is satisfied. We 
compute rk J'(Q) = 0, completing the proof. 

6.11. The case (78 © Cs- The only field over which there could exist an elliptic 
curve with full 8-torsion is Q(C8) = Q(b \/2)- To show that such curves do not exist, 
we will in fact prove the stronger statement that there does not exist an elliptic 
curve over Q(C8) with a subgroup isomorphic to C 4 (B Cs- To prove this, we note 
that the modular curve Xi(4, 8) is isomorphic (over Q(*)) to the elliptic curve with 
Cremona label 32a2 m Lemma 13]. We compute 

Wi(4,8)(Q(C8))=^C4©C4, 
and all the points are cusps, which proves our claim. 

This finishes the proof of Theorem [7] □ 

Acknowledgments. We would like to thank Maarten Derickx for useful discussions 
on the topic of this paper. 
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